Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File:                     uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier:          gCVoaySAQTTmAPdFxkzmwxuxv0/Yv6wlGUOELwNCRaU=
Subject key identifier:   F5:AD:8A:D9:7F:FB:28:69:58:18:AF:31:39:AC:91:42:E1:01:0C:CD
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer:       /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial:       0198CACA679B1EBE4A3C33495C658D504E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number:          1644
Signing time:             Thu 21 Aug 2025 04:01:59 +0000
Manifest this update:     Thu 21 Aug 2025 04:01:59 +0000
Manifest next update:     Fri 22 Aug 2025 04:01:59 +0000
Files and hashes:         1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
                          2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: N/j0TWkNuh3rdQVLeeCbCuTbg5mhD4npnS8wnSVGnnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 23:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:ca:ca:67:9b:1e:be:4a:3c:33:49:5c:65:8d:50:4e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
        Validity
            Not Before: Aug 21 04:01:59 2025 GMT
            Not After : Aug 22 04:01:59 2025 GMT
        Subject: CN=f5ad8ad97ffb28695818af3139ac9142e1010ccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:57:2d:4a:cf:3e:17:1b:25:b0:41:2a:81:
                    7d:7f:2e:93:8e:ad:63:e0:3e:e1:6c:77:1f:9c:91:
                    0e:e8:f8:01:bc:12:5d:18:8c:66:fd:56:79:88:6a:
                    7b:5e:9c:13:8e:0e:3d:41:ca:3b:c1:3b:9b:b9:a8:
                    bb:17:96:a6:33:fb:c8:a9:c7:09:a4:33:e0:0b:82:
                    6d:02:11:16:46:10:17:ab:d5:c9:00:66:ab:20:4a:
                    7e:66:a9:70:32:db:6d:13:84:f0:01:71:95:8e:db:
                    e1:fc:69:45:19:a1:d2:27:af:f6:dc:18:e5:88:76:
                    26:b6:31:dd:a8:00:54:22:76:8d:78:f7:a0:32:c1:
                    44:1b:d0:e2:08:b9:82:6a:2f:e9:71:1b:5c:b8:97:
                    68:15:a8:cd:07:44:bc:c5:f8:d5:96:16:19:51:12:
                    8d:62:74:b3:20:32:0f:0c:9d:d7:5f:a3:fc:78:91:
                    b3:a6:90:22:b4:bf:94:e3:12:cc:9a:d2:b2:62:9f:
                    54:6b:b9:5b:eb:76:00:e9:97:c1:ea:87:00:4e:81:
                    1d:5a:51:98:f5:5c:b3:eb:87:3c:67:f6:25:f9:20:
                    af:ec:0a:2c:45:94:d9:32:78:85:5e:f0:d2:27:5a:
                    03:7b:bb:d5:c4:16:bb:71:af:c5:80:d7:a5:61:8c:
                    af:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AD:8A:D9:7F:FB:28:69:58:18:AF:31:39:AC:91:42:E1:01:0C:CD
            X509v3 Authority Key Identifier:
                keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:15:30:89:58:c3:c7:32:94:72:9e:b8:b7:2b:88:28:c7:f9:
         ba:d0:38:7a:a9:ae:4f:09:53:97:3c:3b:00:51:72:03:e0:44:
         c1:96:12:75:67:48:b6:74:26:56:26:2d:d3:5f:81:8b:36:ae:
         be:a8:0c:0a:cb:3c:c3:59:34:84:59:31:e0:17:4c:f4:5d:2b:
         97:fb:c4:3f:62:91:7e:91:a5:a0:4f:55:11:5e:42:b5:ba:30:
         46:a4:c9:68:aa:2e:77:b4:99:f9:a5:45:40:ff:73:f8:77:f8:
         14:30:08:70:9e:ae:0f:eb:d7:fa:b2:04:74:5d:d1:f5:54:f8:
         c0:de:31:38:a4:d5:be:2d:f9:e0:49:e9:cd:d1:4e:ec:30:6f:
         5d:f4:71:02:5f:f8:54:ff:45:1d:19:03:b0:73:2a:59:33:e4:
         1a:76:be:31:17:09:ee:04:73:bd:4f:5e:ca:38:86:bb:bd:ec:
         e0:f4:39:9e:bf:f0:0e:93:0c:2e:ff:4b:4d:c5:08:fd:4e:84:
         2d:0e:4b:1b:40:0b:15:b1:b5:72:e3:a6:34:2b:6f:b5:6f:40:
         03:a4:a4:2c:fe:2e:fd:58:cb:c6:f2:be:7c:b8:79:96:ac:df:
         5d:22:a6:b8:86:5a:c5:a7:e2:1c:40:dd:3d:d1:e7:b8:03:92:
         1f:0b:e6:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjKymebHr5KPDNJXGWNUE5hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTBjODVjZmEwY2VkNTI4MzYzNDk5N2U3YTRhYThjZTc4
MzZkYjYwHhcNMjUwODIxMDQwMTU5WhcNMjUwODIyMDQwMTU5WjAzMTEwLwYDVQQD
EyhmNWFkOGFkOTdmZmIyODY5NTgxOGFmMzEzOWFjOTE0MmUxMDEwY2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQVXLUrPPhcbJbBBKoF9fy6Tjq1j
4D7hbHcfnJEO6PgBvBJdGIxm/VZ5iGp7XpwTjg49Qco7wTubuai7F5amM/vIqccJ
pDPgC4JtAhEWRhAXq9XJAGarIEp+ZqlwMtttE4TwAXGVjtvh/GlFGaHSJ6/23Bjl
iHYmtjHdqABUInaNePegMsFEG9DiCLmCai/pcRtcuJdoFajNB0S8xfjVlhYZURKN
YnSzIDIPDJ3XX6P8eJGzppAitL+U4xLMmtKyYp9Ua7lb63YA6ZfB6ocAToEdWlGY
9Vyz64c8Z/Yl+SCv7AosRZTZMniFXvDSJ1oDe7vVxBa7ca/FgNelYYyvnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWtitl/+yhpWBivMTmskULhAQzNMB8GA1UdIwQY
MBaAFLmQyFz6DO1Sg2NJl+ekqozng222MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgt
NDczZjE1ZWMwZDUyLzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNzBlY2QtZTU3Ny00MDU4LTkzNTgtNDczZjE1ZWMwZDUy
LzEvdVpESVhQb003VktEWTBtWDU2U3FqT2VEYmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAhUwiVjD
xzKUcp64tyuIKMf5utA4eqmuTwlTlzw7AFFyA+BEwZYSdWdItnQmViYt01+Bizau
vqgMCss8w1k0hFkx4BdM9F0rl/vEP2KRfpGloE9VEV5CtbowRqTJaKoud7SZ+aVF
QP9z+Hf4FDAIcJ6uD+vX+rIEdF3R9VT4wN4xOKTVvi354EnpzdFO7DBvXfRxAl/4
VP9FHRkDsHMqWTPkGna+MRcJ7gRzvU9eyjiGu73s4PQ5nr/wDpMMLv9LTcUI/U6E
LQ5LG0ALFbG1cuOmNCtvtW9AA6SkLP4u/VjLxvK+fLh5lqzfXSKmuIZaxafiHEDd
PdHnuAOSHwvmTw==
-----END CERTIFICATE-----
Generated at Thu Aug 21 08:31:46 2025 by rpki-client